Re: MWEB legal department - call for assistance
Mark Elkins <mje-2mCUHEwelu/[email protected]> Tue, 27 May 2014 14:29:07 +0200
| Newsgroups | gmane.org.operators.ioz |
|---|---|
| Organization | Posix Systems |
| Message-ID | <[email protected]> |
Hi Saul, At one time, it may have been considered a good idea to run from a local copy of a Root Nameserver so in the event of a catastrophe you'd be OK. Another reason could have been you wanted some "alternative" names.... This did indeed happen. A week after 9/11, the generators on Manhattan Island ran out of Diesel. Nowadays, we have three (or more) of the Root Nameservers Anycasted from JINX. So as long as your ISP has a connection to JINX (or CINX), you have access to the Root. You should also have access down the chain to South African based ISP's. There is a copy of ZA at JINX on za-ns.anycast.pch.net. and there is a copy of CO.ZA at JINX on coza1.dnsnode.net. (choosing AnyCast instances...) Of course, if your ISP does not Peer at JINX... On Tue, 2014-05-27 at 09:06 +0200, Saul wrote: > HI Mark, > > Interesting point you make, something that I have been pondering of late: > > >The two types of Nameservers should be kept completely separate. A > >Recursive server must find an answer to a query by chasing the >answer down > >from the root. (And of course cache it for the designated time..) > > Yes I agree 100% one has recursive and authoritative servers. > > Lets work through the following scenario: > > Just say I have both. My authoritative servers are responsible for 1000s of > domains. Why would I want my tens of thousands of eyeballs, going to the > root servers, inducing extra latency when if they could just look at the > authoritative server, the responses would be much better. > > OK, one reason is that it would break DNS sec, but for smaller ISPs, it is > very important to keep the DNS for your clients up. If your upstream were to > loose connectivity the return to root, causes even your directly connected > clients to loose connectivity (DNS) to you. Yes, I might have other routes > to get to the root servers, but other levels of the DNS tree, so might know > where to look for .za, but can't get to them to look for co.za > > Any thoughts? > > > _______________________________________________ > IOZ mailing list > [email protected] > http://lists.internet.org.za/mailman/listinfo/ioz -- Mark James ELKINS - Posix Systems - (South) Africa mje-2mCUHEwelu/[email protected] Tel: +27.128070590 Cell: +27.826010496 For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za _______________________________________________ IOZ mailing list [email protected] http://lists.internet.org.za/mailman/listinfo/ioz
smime.p7s
(application/x-pkcs7-signature, 5.7 KB) - not displayed